Searches and extracts security data from Burp Suite project files using regex patterns and command-line tools.
This skill enables Claude to interact with Burp Suite Professional project files (.burp) via the command line, facilitating advanced security research and audit workflows. It allows for regex-based searching of request/response headers and bodies, extraction of security findings (audit items), and targeted analysis of proxy history or site maps. By delegating parsing to the Burp Suite engine through a specialized extension, it provides a powerful way to automate the triage of vulnerabilities and explore captured HTTP traffic directly within the development environment while maintaining strict output limits for performance.
주요 기능
01Sub-component filtering to retrieve specific data like site maps or proxy history
02Regex-based searching across HTTP request/response headers and bodies
03Safety-first output truncation to prevent context window overflow
04Extraction of security audit items with severity and confidence filtering
05Standardized JSON output compatible with jq for complex data processing
06938 GitHub stars
사용 사례
01Triaging high-severity findings from automated Burp Suite security scans
02Searching proxy history for specific server signatures or sensitive data patterns
03Mapping an application's attack surface by extracting unique URLs from a site map
